topic Re: 2 internet lease line links. (Single ISP) in General Topics

2 internet lease line links. (Single ISP)

bit_byte — Tue, 21 Jul 2020 07:18:30 GMT

two PA firewalls and we configured in HA (Active-Passive mode).
We got /28 subnet from ISP for 2 internet lease line links. (Single ISP)
configured links on one firewall with IP 99.100.100.111 on interfacet 4 and 94.100.100.110 on interface 2. With next hope 94.100.100.109
after commit we got interface overlap error.
Is it possible to configure this ?

@BPry
@MP18

Re: 2 internet lease line links. (Single ISP)

MP18 — Tue, 21 Jul 2020 15:05:30 GMT

@bit_byte

Seems you can not configure 2 Interfaces which belong to same network.

/28 gives you host range from 99.100.100.97 - 99.100.100.110.

What are you trying accomplish here?

Do you need two links to same ISP for Redundancy?

Overlapping subnets are supported only when each overlapping interface/sub-interface is in a separate virtual router.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClEoCAK

Regards

Re: 2 internet lease line links. (Single ISP)

SutareMayur — Wed, 22 Jul 2020 14:22:28 GMT

@bit_byteAs you are taking two separate internet links, why don't you ask ISP to give different subnets for each link so it will have separate gateways? This way you can configure both links as per your requirements. Not sure about your agreements with ISP side but normally we get separate networks for different internet links unless you have your owned public IP addresses and you have asked ISP to route it the way you want.